Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    01-11-2023 14:11

General

  • Target

    NEAS.698bba413f0afcf7502271daa6443a90.exe

  • Size

    29KB

  • MD5

    698bba413f0afcf7502271daa6443a90

  • SHA1

    d8d0c06f7bfe1150264d50c9f2c3ac07855d0100

  • SHA256

    a3a01a60bb61fb6a0fac48fcc0d1ea6beaf13b33f47630262749dc614f4461d0

  • SHA512

    5c0746101e8453b37a4d4c31abb875e1020e4ac037939155cd94c44294cd250046bd13d2af4bad1408ad088fb25b1eedc803dd0e31e532e5a1d174d41da83531

  • SSDEEP

    768:ITRfpN0pOy3OzeXmOGXbJOlB2vsLCik5dAy7b6lSp:IHzzeWHXbJGB2EOik5h36lq

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.698bba413f0afcf7502271daa6443a90.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.698bba413f0afcf7502271daa6443a90.exe"
    1⤵
      PID:2056

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\My Downloads\Warcraft 3 battle.net Key Generator.exe

      Filesize

      29KB

      MD5

      0aa5ef33869cecde85029c51d3b0e6d0

      SHA1

      0329b874cae6d22266db2c4baa591e9b798018cb

      SHA256

      ba8c84f98ab52cf90b4c6582d95bca8148fd349505f51d04b26ea1d9580a69d3

      SHA512

      3aac88ea7f6d899542701d2b1656c04f577436fb49be40b856c75852797c24f2afcb7c30d9aec1418aeb26c4b82670e5185b966e6ba329c831a81700a1e1fa8f

    • memory/2056-0-0x0000000000400000-0x000000000041A000-memory.dmp

      Filesize

      104KB

    • memory/2056-101-0x0000000000400000-0x000000000041A000-memory.dmp

      Filesize

      104KB